$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.mft File: 38D72675FCFA53571947E587993417F0A2E84774.mft (raw, json) Hash identifier: pmNPUDhCB6WPP9ks5S/xfTZCjfZmFIoQj0gZmkAWYWk= Subject key identifier: B0:D5:4D:66:B3:0A:E3:B8:E4:11:44:BE:F6:6E:9B:2C:59:71:69:DE Authority key identifier: 38:D7:26:75:FC:FA:53:57:19:47:E5:87:99:34:17:F0:A2:E8:47:74 Certificate issuer: /CN=38D72675FCFA53571947E587993417F0A2E84774 Certificate serial: 3AB0B0AFE6019C89863AA8C8D82729CE64A9B5C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38D72675FCFA53571947E587993417F0A2E84774.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.mft Manifest number: ED Signing time: Sun 25 Oct 2026 15:51:28 +0000 Manifest this update: Sun 25 Oct 2026 15:46:28 +0000 Manifest next update: Mon 26 Oct 2026 19:35:28 +0000 Files and hashes: 1: 3131342e3134312e39332e302f32342d3234203d3e203338373733.roa (hash: So6HCFRYfBIDo3Yy4ADeQ9cjX7P8uCC8BIv2/s6u/0g=) 2: 38D72675FCFA53571947E587993417F0A2E84774.crl (hash: cOITOI7YqqMkhjt1fP9glqEOTyDYaGB0RXrQcn8sNCc=) 3: 3131342e3134312e38382e302f32342d3234203d3e203338373733.roa (hash: FscfLd+VmMO0VIBUn9YaLAaHtn1/p9aWzjIEPbsat1U=) 4: 3131342e3134312e38392e302f32342d3234203d3e203338373733.roa (hash: uTIMEfksgIfw3pC5q8pYKmgEjBmK5dhPwmsdESCHDfM=) 5: 3131342e3134312e39302e302f32342d3234203d3e203338373733.roa (hash: 60QvD+kuWCtJFdascF9uuaceBf/9kdy2qmj8qDdkANM=) 6: 3131342e3134312e39322e302f32342d3234203d3e203338373733.roa (hash: 81ry6DUJ7vS8X5kvVlKujeT3BQmxdahLH8ZK0O09vk0=) 7: 3131342e3134312e39352e302f32342d3234203d3e203338373733.roa (hash: BtBofw2ddLFZvd8330UeqRlGDcKEpNlQwCfV2FpF8/w=) 8: 3131342e3134312e39312e302f32342d3234203d3e203338373733.roa (hash: 4dNfe19s0fvjSguokSLbqrRLsnLRnuoEvEhmGuqBlvY=) 9: 3131342e3134312e39342e302f32342d3234203d3e203338373733.roa (hash: KBgcMCCrYhviN35Lsj+SDe+UfidQ9sTv4EpZKCSDnc4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.crl rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38D72675FCFA53571947E587993417F0A2E84774.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 19:35:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b0:b0:af:e6:01:9c:89:86:3a:a8:c8:d8:27:29:ce:64:a9:b5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38D72675FCFA53571947E587993417F0A2E84774 Validity Not Before: Oct 25 15:46:28 2026 GMT Not After : Oct 26 19:35:28 2026 GMT Subject: CN=B0D54D66B30AE3B8E41144BEF66E9B2C597169DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:79:1a:09:51:1b:4b:d1:1d:f7:9a:c9:f4:c8: 8a:47:e9:69:6e:80:a8:9f:cd:b1:93:df:4a:af:15: bc:35:e8:aa:12:6f:52:47:3a:ba:c8:f4:64:00:68: 3e:a1:1f:b2:b4:3e:d5:5d:ca:87:0e:47:0d:37:f1: 9c:85:3d:5b:c2:84:93:e5:27:46:ec:09:6a:36:18: 7b:51:2d:64:61:f6:74:bf:c7:d2:e4:44:3e:3e:b0: 1d:a7:59:fd:c2:e5:60:33:82:4d:b7:68:f0:b4:4b: 22:01:f0:3f:57:17:8e:ca:54:60:6e:f5:83:73:ef: 55:b2:e7:9d:e7:ad:4c:70:21:9d:3e:34:0a:2c:c6: 35:c6:1a:85:da:98:d5:5b:6c:fb:dc:0b:cc:1b:f1: fe:a6:b4:91:fc:6e:26:ca:52:06:8e:4d:be:89:2a: d0:00:04:25:31:94:cb:8d:01:03:1b:55:ba:c7:74: 8a:d9:e5:ed:2f:d8:24:3b:8d:bb:e2:23:66:99:98: 0c:51:1f:c5:36:ad:65:24:db:da:01:bf:03:ea:78: a4:50:6a:be:2c:aa:0f:66:89:ce:c3:ae:a7:8c:38: 20:38:e0:bd:ad:83:b2:4b:18:63:3d:e5:a7:49:e0: 64:49:7b:77:77:d9:f0:f6:08:1a:47:13:13:c0:60: 95:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D5:4D:66:B3:0A:E3:B8:E4:11:44:BE:F6:6E:9B:2C:59:71:69:DE X509v3 Authority Key Identifier: keyid:38:D7:26:75:FC:FA:53:57:19:47:E5:87:99:34:17:F0:A2:E8:47:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38D72675FCFA53571947E587993417F0A2E84774.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:86:28:de:9f:85:30:aa:e4:b0:c3:f3:fd:e9:79:76:08:fa: e9:39:a1:d8:30:b1:ef:bf:6b:d7:b4:9a:0a:5f:d7:9f:36:c8: c0:55:17:30:50:31:29:02:c2:a8:da:02:45:3a:5a:ec:f4:81: ce:1f:a9:55:84:00:17:25:23:de:14:00:50:9a:1a:51:63:58: 25:34:e4:17:39:8d:1d:80:37:b7:e9:0d:90:5f:a7:22:6c:0f: 75:a9:da:fc:be:7e:4c:14:0d:fc:a0:1d:48:4e:8e:83:1d:df: e7:b7:72:1e:34:74:1c:87:bd:37:49:78:68:dc:12:d2:5e:ef: 87:b5:ac:89:77:98:8a:33:e9:52:94:50:4c:f2:b4:31:37:f7: 39:71:54:7f:7a:a9:df:63:98:13:b0:b4:17:5f:63:e3:bb:c1: d1:96:1d:ba:d6:9f:8b:d2:e6:3e:f2:19:99:db:f1:69:3a:cf: ef:a2:ac:2f:ea:2a:fe:cb:c9:d4:ca:e3:bc:b5:ed:17:f6:09: 9e:c7:6e:59:9f:e1:9f:e2:45:0b:48:96:b0:e3:0d:4e:11:06: ad:61:36:d4:c6:b5:d7:36:75:1b:8d:98:d5:a1:7b:1d:ce:32: 2c:39:74:46:e8:18:e0:9b:17:9c:0d:c9:57:f1:85:4b:95:0f: 20:19:8b:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOrCwr+YBnImGOqjI2CcpzmSptcAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhENzI2NzVGQ0ZBNTM1NzE5NDdFNTg3OTkzNDE3RjBB MkU4NDc3NDAeFw0yNjEwMjUxNTQ2MjhaFw0yNjEwMjYxOTM1MjhaMDMxMTAvBgNV BAMTKEIwRDU0RDY2QjMwQUUzQjhFNDExNDRCRUY2NkU5QjJDNTk3MTY5REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1eRoJURtL0R33msn0yIpH6Wlu gKifzbGT30qvFbw16KoSb1JHOrrI9GQAaD6hH7K0PtVdyocORw038ZyFPVvChJPl J0bsCWo2GHtRLWRh9nS/x9LkRD4+sB2nWf3C5WAzgk23aPC0SyIB8D9XF47KVGBu 9YNz71Wy553nrUxwIZ0+NAosxjXGGoXamNVbbPvcC8wb8f6mtJH8bibKUgaOTb6J KtAABCUxlMuNAQMbVbrHdIrZ5e0v2CQ7jbviI2aZmAxRH8U2rWUk29oBvwPqeKRQ ar4sqg9mic7DrqeMOCA44L2tg7JLGGM95adJ4GRJe3d32fD2CBpHExPAYJUnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsNVNZrMK47jkEUS+9m6bLFlxad4wHwYDVR0j BBgwFoAUONcmdfz6U1cZR+WHmTQX8KLoR3QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzdmYzU0ZmItNzI0ZS00MzE2LWI5YmMtMWM0YjA2ZWE1N2FlLzAvMzhENzI2NzVG Q0ZBNTM1NzE5NDdFNTg3OTkzNDE3RjBBMkU4NDc3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOEQ3MjY3NUZDRkE1MzU3MTk0N0U1ODc5OTM0MTdGMEEyRTg0 Nzc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzdmYzU0ZmItNzI0ZS00MzE2LWI5 YmMtMWM0YjA2ZWE1N2FlLzAvMzhENzI2NzVGQ0ZBNTM1NzE5NDdFNTg3OTkzNDE3 RjBBMkU4NDc3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGeGKN6fhTCq5LDD8/3peXYI+uk5odgwse+/ a9e0mgpf1582yMBVFzBQMSkCwqjaAkU6Wuz0gc4fqVWEABclI94UAFCaGlFjWCU0 5Bc5jR2AN7fpDZBfpyJsD3Wp2vy+fkwUDfygHUhOjoMd3+e3ch40dByHvTdJeGjc EtJe74e1rIl3mIoz6VKUUEzytDE39zlxVH96qd9jmBOwtBdfY+O7wdGWHbrWn4vS 5j7yGZnb8Wk6z++irC/qKv7LydTK47y17Rf2CZ7Hblmf4Z/iRQtIlrDjDU4RBq1h NtTGtdc2dRuNmNWhex3OMiw5dEboGOCbF5wNyVfxhUuVDyAZi8w= -----END CERTIFICATE-----Generated at Mon Oct 26 14:21:04 2026 by rpki-client